Security researchers just showed how to take over an AI coding agent with nothing but a text file. No exploit. No malware. Just a file named AGENTS.md sitting in a folder the agent already trusted. Re...
If you manage IT for a small business, you've felt this whiplash: a headline screams "CRITICAL VULNERABILITY" with a CVSS score of 9-point-something, and you have no idea if that means cancel your wee...
If you manage Microsoft 365 for a small business, you've probably clicked Accept on a vendor's permission request without reading past the first line. Most of the time that's fine. But the recent Conn...
If you manage Microsoft 365 for a small business, you've clicked "Accept" on a third-party app consent screen more times than you can count. Most of the time it's harmless — a scheduling tool, a backu...
You changed the password. You forced a sign-out on all sessions. You told the team the incident is closed. But if you're like most small organizations recovering from a Business Email Compromise (BEC)...
It started with a wave of emails that looked completely routine: a managed print services vendor asking IT admins to download and install a new monitoring agent via a third-party link. Nothing about t...
When Your Chatbot Lies to You An MSP IT admin recently described a scenario that should worry every small business owner: an employee was mid-task inside a ChatGPT session when a message appeared aski...
A small business employee was chatting with what looked like ChatGPT. Mid-conversation, the AI directed them to a verification page to confirm their account. The page looked legitimate. It wasn't. It...
A dental office owner posts on Reddit asking a simple question: does the MSP really need full admin login credentials to the office router, or is read-only access enough? The MSP's technician — who al...
The Request You Didn't Train For An employee or client pings you: "Hey, I built a little app with Claude to help with [scheduling / invoicing / customer lookups]. Can you install it on my work laptop?...